elektrokniha.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1c:50:d7:f7:c6:4e:1b:82:c2:bf:1e:45:ae:5e:a6:b1:6b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=elektrokniha.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1c:50:d7:f7:c6:4e:1b:82:c2:bf:1e:45:ae:5e:a6:b1:6bSerial Number (int): 270972223678020916543668836850741016965483
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d5:35:3d:7c:22:18:f1:34:0f:18:24:2a:8e:1c:cb:03:73:32:5d:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a4:c4:54:58:d3:d5:42:64:1a:c0:77:9a:8f:79:51:4f:74:c7:bc:e5
Fingerprint (sha256): 85:bd:20:fc:db:7f:83:83:3b:3f:2d:c0:3b:a9:36:93:6f:48:f8:85:89:5a:83:b2:7c:27:ea:61:a7:92:40:34
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate elektrokniha.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for elektrokniha.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
elektrokniha.cz
www.elektrokniha.cz
www.elektrokniha.cz
Other certificates including the domain name elektrokniha.cz
(limited to 100 certificates)
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
elektrokniha.cz
Certificate
The complete raw certificate details for elektrokniha.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgISAxxQ1/fGThuCwr8eRa5eprFrMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MTAwMjQ2NThaFw0x ODA3MDkwMjQ2NThaMBoxGDAWBgNVBAMTD2VsZWt0cm9rbmloYS5jejCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAOXRlVuXkcCFYewR/xgJhnQ+mqwd51fD /po72Zq8y55k646cZKx3zV6MykC+Bm/490oqM0NpB0o7rsAG1yY8VHast26JTzYz qNGG93yn3H6IJ4RbwUaMVpf5KLAN7ZT1kUJWGR3iLb0Y1n32wwYRiuhCexlHMLVZ vC7ZE6m+JIy3ZT84ICxCpeCXvVJeSbtzkjf9gV9l8SWE4ogvxaChxXPPhMnKvhqq lYhs8I9QXuYw5BgywkMFT0qzjEOZ+ByqUEw7AIPBUq3zlsFfa+rAOMl8s2dN8u1x UfwGNNpgna+xq55YNEVWPPwxTHg55omjhHQT9qC5CbtpWX3ax1tU928CAwEAAaOC AyswggMnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU1TU9fCIY8TQPGCQqjhzLA3My XUQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzAvBgNVHREEKDAmgg9lbGVrdHJva25paGEuY3qCE3d3dy5lbGVrdHJva25p aGEuY3owgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHW MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYB BQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1 cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdp dGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNl bmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1 ANt0r+7LKeyx/so+cW0s5bmquzb3hHGDx12dTze2H79kAAABYq2p8SoAAAQDAEYw RAIgJiT9SANvt4aR3ZPq/pNOZESbrIjbUgocKX7Bv8a5B4ECIFUaRADJBzKGBr65 F212Iy3ISJ0qs4Qqs0kEpYOUOAIGAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk wwz05UVH9HgAAAFiranxYAAABAMARzBFAiEA6onUQ0SpURZw4HmtANnu7timNNBo mE0INM4YJtltQbMCIClG4ZIJgB3Ope5g3pwLeSWg0DuyLjPWl5Stw1ccGqODMA0G CSqGSIb3DQEBCwUAA4IBAQACCaQY9mVdDo5i72alX5ieYl519S9r6z3MTPzDhLED w96lSvyG8K73wOq5BhqZUgY2Mg2ET457Un1LWQRbUIbe7Y98dnbiL4plstjqdGP9 3qm6xknx5fmaHM7XKZEfTZafhYMRQ6Mg6cW6Gp6b+TYR2VOGE9F2vY/GI35z4j3W pKY9nK14hBNAly1YyJBhMdrFsiuMvAYHP+Xaks/oGvhPSce00ZyCNhLvgutgcso6 vMOZ6RiMuimvHujkrdYQpxwfpKVjEx+0vOKVsZqMzuKhiB7LFhRZ9pwSupsS4g5b p6dTXJhZqNuqUM20tMA2TuX2tpb293ULZ3C3NeH0dfd0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dGVW5eRwIVh7BH/GAmG dD6arB3nV8P+mjvZmrzLnmTrjpxkrHfNXozKQL4Gb/j3SiozQ2kHSjuuwAbXJjxU dqy3bolPNjOo0Yb3fKfcfognhFvBRoxWl/kosA3tlPWRQlYZHeItvRjWffbDBhGK 6EJ7GUcwtVm8LtkTqb4kjLdlPzggLEKl4Je9Ul5Ju3OSN/2BX2XxJYTiiC/FoKHF c8+Eycq+GqqViGzwj1Be5jDkGDLCQwVPSrOMQ5n4HKpQTDsAg8FSrfOWwV9r6sA4 yXyzZ03y7XFR/AY02mCdr7Grnlg0RVY8/DFMeDnmiaOEdBP2oLkJu2lZfdrHW1T3 bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270972223678020916543668836850741016965483 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-10 02:46:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 02:46:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elektrokniha.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29011921277871893195331044666322101218814964960059399627396947402622761651464394946581470261435793264536489592190717289182496376319927244033041615216941416005023690557535511502143889944798933252644660376527168958887713143915971207006343308876271155674705968295347179272537463690468116451670257589045618045295435587508429754983123574587940252198936532129191052047716894829349897231591202451992241623960867589958863156018823975518206784957954209323427168781077616542811433910333361892443662803994117283406907295714466920030903121379952591635297372244585526898573199818184593345553075361308486618103392300347734598416239 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d5353d7c2218f1340f18242a8e1ccb0373325d44 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elektrokniha.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektrokniha.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162ada9f12a000004030046304402202624fd48036fb78691dd93eafe934e64449bac88db520a1c297ec1bfc6b907810220551a4400c907328606beb9176d76232dc8489d2ab3842ab34904a58394380206007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162ada9f1600000040300473045022100ea89d44344a9511670e079ad00d9eeeed8a634d068984d0834ce1826d96d41b302202946e19209801dcea5ee60de9c0b7925a0d03bb22e33d69794adc3571c1aa383 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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